node/deps/v8/test/mjsunit/compiler/number-subtract.js
Michaël Zasso 9b4bf7de6c
deps: update V8 to 7.1.302.28
PR-URL: https://github.com/nodejs/node/pull/23423
Reviewed-By: Colin Ihrig <cjihrig@gmail.com>
Reviewed-By: Gus Caplan <me@gus.host>
Reviewed-By: Myles Borins <myles.borins@gmail.com>
2018-12-06 15:23:33 +01:00

35 lines
1.1 KiB
JavaScript

// Copyright 2018 the V8 project authors. All rights reserved.
// Use of this source code is governed by a BSD-style license that can be
// found in the LICENSE file.
// Flags: --allow-natives-syntax
// This tests that SpeculativeNumberSubtract can still lower to
// Int32Sub in SimplifiedLowering, which requires some magic
// to make sure that SpeculativeNumberSubtract survives to that
// point, especially the JSTypedLowering needs to be unable
// to tell that the inputs to SpeculativeNumberAdd are not
// Number, Undefined, Null or Boolean.
(function() {
// We need a function that has a - with feedback Number or
// NumberOrOddball, but for whose inputs the JSTypedLowering
// cannot reduce it to NumberSubtract (with SpeculativeToNumber
// conversions). We achieve this utilizing an object literal
// indirection here.
function baz(x) {
return {x}.x - x;
}
baz(null);
baz(undefined);
// Now we just need to truncate the result.
function foo(x) {
return baz(42) | 0;
}
assertEquals(0, foo());
assertEquals(0, foo());
%OptimizeFunctionOnNextCall(foo);
assertEquals(0, foo());
})();